[squid-users] Removing cache credentials

[Victor Sudakov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Amos Jeffries wrote:
> > 
> > I have set-up squid proxy server with ldap authentication , the 
> > infrastructure is setup in such a way that users have to access the
> > internet through the proxy .In Internet explorer there's an option
> > to save the credntials and once its saved during the prompt squid
> > wont ask for credentials the user will have direct access to
> > internet .
> 
> Wrong and wrong.
> HTTP (thus Squid) is stateless. Each and every single request requires
> the credentials necessary to pass that request through the proxy.

Once you mentioned it, I have a question. 

If we speak about Kerberos authentication. On the very first request,
the browser receives a "407 Proxy Authentication Required" reply and
learns that it is expected to provide credentials. For a certain amount
of time, the browser knows that it should send the credentials with
every request without waiting for an 407 reply.

How long is this amount of time? Is it like forever?  Is there ever a
limit after which the browser will try again to send a request without
credentials? Maybe after a browser restart or what?

- -- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUZvPIAAoJEA2k8lmbXsY0qn8IAIoxZnizrSzrx6mozpqDo64n
zjwuYNPO7RmEcXWJx8/YBYH1/dPMJ+ya5oHq588jOij0zOmxKu2NcA7h7RvBGRxt
2L9CJWLG+9iQrndoPZwghG5/f3AhTz8sq9QuOUB2Cw2+DCFi2VWYTFhlcvK9INsl
AngytS3e8xlrdnQ9S8VGA5bayG7Qt3eoVorSc0GJ+tb+fHM5rs1TfdJExr4ALLeX
UQkOuIKFlyzcS4wfRIcmjHxW3Fce7+E8tZQnoyic8ZFOf5GZspBRi1BLRJ31cDuJ
k/VB7erdd8VhDrydB2p0IJsaeE9hNGyH1vgecBU39wAZg4uU1HzQL3ThC/CAWAA=
=APpH
-----END PGP SIGNATURE-----